Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa
File: f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa (raw, json)
Hash identifier: UBpSR8WOWaEnfeK72kaRlDRTBq67hTEA8hkoFXwyOOc=
Subject key identifier: D3:7B:21:B4:CA:55:55:B3:C7:7B:8C:95:7B:33:78:C5:53:9A:7F:83
Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial: 010D0C9F432858493243DE5A6161996B4174A260
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 399240
IP address blocks: 12.42.147.0/24 maxlen: 24
12.188.33.0/24 maxlen: 24
12.215.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:de:5a:61:61:99:6b:41:74:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=71e78bdd-3821-4dba-8de6-f1e93fc1ccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:29:ed:c1:76:ef:bc:70:86:38:d4:b4:2e:
53:3e:57:7d:fd:db:a8:c6:68:6e:3e:ff:8d:ea:c7:
8d:87:8f:c1:7f:70:a1:9d:0d:b9:87:da:d4:b1:21:
1a:2d:17:f0:9f:7f:3d:36:eb:46:43:8c:4d:9c:da:
77:d7:7e:65:57:e6:9d:4e:d5:ee:74:c1:e4:ef:75:
ef:66:9a:c5:91:ad:bb:0c:ed:e9:31:99:10:a0:bf:
09:06:d1:08:88:b5:07:53:dc:1e:3a:d7:95:1f:77:
d8:1c:3a:89:56:32:b6:d4:7d:ab:16:53:de:d0:9a:
ff:87:7f:2f:40:e8:88:4d:02:4b:f8:39:ef:a0:16:
7d:29:95:09:f0:7b:dc:08:90:62:68:04:1e:9f:15:
d7:53:db:cb:9a:12:d0:41:30:33:99:51:42:89:6b:
4f:6c:e5:f3:c1:0b:55:6c:0b:b4:b9:6d:fd:4b:46:
f0:ea:2b:c4:46:ff:39:73:8a:8a:78:4e:ff:c5:77:
f5:af:d3:8b:fa:2c:88:85:00:f9:0a:aa:35:be:99:
23:6e:b2:4b:c8:ea:41:87:25:34:b2:d0:fe:f8:a9:
cb:e1:dd:75:ff:26:75:98:99:09:b5:a5:9a:e9:51:
9f:1b:40:59:30:b0:a0:c2:14:8d:94:02:93:ae:3b:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7B:21:B4:CA:55:55:B3:C7:7B:8C:95:7B:33:78:C5:53:9A:7F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
X509v3 Authority Key Identifier:
keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
sbgp-ipAddrBlock: critical
IPv4:
12.42.147.0/24
12.188.33.0/24
12.215.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:0a:8a:4e:d1:1c:5e:5b:c5:34:35:f6:f1:99:df:04:d4:52:
72:63:5b:5c:e4:11:a7:00:fb:46:91:67:45:3a:fb:34:c8:1b:
d9:d1:f2:61:c3:e0:7c:23:34:fc:9c:18:8d:dc:10:9b:aa:74:
21:97:83:6b:62:0d:76:8d:7e:c8:22:c7:1c:f0:3e:b5:b8:d5:
72:41:3f:a7:94:ae:6e:ac:72:1f:cd:c8:8f:f6:a3:78:73:5e:
f4:da:f5:f6:83:db:be:a1:88:48:76:c5:23:29:e0:f3:fe:ef:
b9:40:6b:e8:c7:78:a9:b5:fe:ea:06:f4:28:69:07:a5:a6:76:
46:b8:31:93:b2:f3:61:1e:b3:77:0e:a7:28:1d:51:7f:ae:38:
2b:52:a4:5d:2c:1a:a6:a9:78:5f:f7:16:02:55:04:00:e8:1e:
89:92:45:08:61:42:a6:6c:a9:80:d3:94:ba:37:ab:47:4e:b2:
06:7b:c6:fd:5a:01:21:dd:85:96:75:18:30:50:3f:a0:5b:88:
e0:b1:b9:73:d3:c7:ce:45:75:ef:fe:0f:2e:61:da:1a:9d:7e:
30:a9:6c:d2:d2:36:24:87:e0:2d:7d:43:e6:50:ac:8c:c9:50:
27:a1:eb:21:fa:76:c1:62:96:45:9f:52:33:4e:39:78:08:89:
f7:64:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:04:55 2025 by rpki-client